PyMISP
PyMISP copied to clipboard
Event reports not exported in Feed generator
The event reports are not exported by the Feed generator
+1 for this feature request.
MISPEvent.to_feed() currently discards event reports.
It's easy enough to do something quick and dirty like:
event_feed = event_misp.to_feed(with_meta=True)
event_reports = misp.get_event_reports(event_misp.id)
event_feed['Event']['EventReport'] = [x['EventReport'] for x in event_reports]
But I really think they should just be included by this function in the first place.
Another +1 for this. The workaround from @UFOSmuggler worked well for me but the event report provides important context you'd want in the feed output.
Whacked in a PR to add this functionality as a kwarg boolean: https://github.com/MISP/PyMISP/pull/952
PR merged, thanks!